This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(297.6, 96%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EK%3C/text%3E%3C/svg%3E)
Does Azure B2C support aes128-gcm to decrypt SAML response assertions?
Hi @Kry , thanks for the question. According to this document Azure AD uses AES-256 to encrypt the SAML assertion data. Do you have any questions or specific needs I can help you with? If so please let me know.
If this answer helped you please mark it as "Verified" so other users can reference it.
Thank you,
James
Hi James and thanks for the answer and link.
The IDP I'm trying to connect to uses aes128-gcm to encrypt the SAML response, so my B2C client has to use the same algorithm to decrypt it.
I can see in the logs in Applications Insight that an exception has been thrown which says "The specified Uri is not supported." The authentication fails when I'm redirected to my B2C which is what lead me to think that my tenant can't decrypt the SAML response but I'm obviously not sure of that.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(102.4, 26%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJP%3C/text%3E%3C/svg%3E)
Do you have an answer for the question @James Hamil ?